Skip to content

Entity Pivot: top-level Entities navigation and email linking strength #485

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
maximelb merged 1 commit into from
Oct 4, 2026
Merged

Entity Pivot: top-level Entities navigation and email linking strength #485

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions docs/cloud-security/entity-pivot.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,8 +17,8 @@ Ownership relates a User to a Host; they remain separate entities.

## Investigate an entity

Open **Cloud Security → Entities** and search with an identifier
prefix. Results are grouped into Users and Hosts. Search covers every identifier
Open **Entities** from the top level of the console sidebar and search with an
identifier prefix. Results are grouped into Users and Hosts. Search covers every identifier
type below, requires at least two characters and accepts up to 512 UTF-8 bytes.
You can also start from Identity 360, a sensor page or an Email Security message's
sender or mailbox address.
Expand All @@ -37,7 +37,7 @@ the first result. Possible matches are displayed separately as **unconfirmed**.

| Identifier type | Meaning |
|---|---|
| `email` | Mailbox address, directory email, user principal name or reported alias. |
| `email` | Mailbox address, user principal name, sign-in email or directory alias. An editable directory mail attribute (Entra `mail`, Okta secondary email) that matches no sign-in address on the same record is only a possible match. |
| `entra_object_id` | Microsoft Entra user object ID. |
| `okta_user_id` | Okta user ID. |
| `gws_user_id` | Google Workspace user ID. |
Expand Down
Loading